Signature Validation

A callback contains signature, calculated from non-empty callback values and the merchant private key.

Field order

token
type
status
extraReturnParam
orderNumber
amount
currency
gatewayAmount
gatewayCurrency

Algorithm

Each non-empty value contributes:

<value length><value>

The parts are concatenated in the listed order. merchant_private_key is appended, and lowercase MD5 is calculated. Empty and absent values are skipped.

Test vector

Input:

{
  "token": "7ca152d572b003e0ab53ce60637b4324",
  "type": "pay",
  "status": "approved",
  "extraReturnParam": "AutoTest_3781",
  "orderNumber": "AutoTest_9153",
  "amount": 1000,
  "currency": "USD",
  "gatewayAmount": 1000,
  "gatewayCurrency": "USD"
}

Key: merchant_private_key.

Input string:

327ca152d572b003e0ab53ce60637b43243pay8approved13AutoTest_378113AutoTest_9153410003USD410003USDmerchant_private_key

MD5:

3da11c6b799dcb581da94483569f6a23